Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/Est_vQRoiujQ8bsoPVcb1HdRpHo.roa
File: Est_vQRoiujQ8bsoPVcb1HdRpHo.roa (raw, json)
Hash identifier: WjfhWX8IGVvd1fl5x4YbAuB7jNJskQKUzAgUuVDQ5eg=
Subject key identifier: 12:CB:7F:BD:04:68:8A:E8:D0:F1:BB:28:3D:57:1B:D4:77:51:A4:7A
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 018570F0974E482ADA6D1859E3C98E12705F
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/Est_vQRoiujQ8bsoPVcb1HdRpHo.roa
Signing time: Mon 02 Jan 2023 05:24:53 +0000
ROA not before: Mon 02 Jan 2023 05:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47943
IP address blocks: 193.19.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:97:4e:48:2a:da:6d:18:59:e3:c9:8e:12:70:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 2 05:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12cb7fbd04688ae8d0f1bb283d571bd47751a47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:7f:24:49:4c:27:0d:a2:34:73:35:bc:5a:
ca:dc:c7:e4:78:d2:db:8d:cf:47:40:c3:1b:ee:ca:
7a:7c:b0:36:a6:8e:2f:62:25:5f:a3:64:84:60:fa:
6d:65:8b:6e:27:85:c6:1c:95:b9:82:74:f3:9c:c3:
21:2d:aa:44:55:b0:75:cb:6b:fb:de:d7:02:b6:84:
07:58:d9:5d:c0:30:5b:c9:08:bf:56:31:bf:57:65:
7a:b7:3a:47:84:46:39:43:0d:59:b5:db:5a:ea:8e:
14:1b:76:85:55:8d:f0:76:f5:23:fe:0d:36:ee:57:
c3:c2:0b:e7:78:81:e9:67:41:90:5e:99:24:ee:ce:
38:28:35:7d:b4:c1:e4:87:47:ca:c9:4f:21:56:ea:
7e:21:ea:41:f8:3b:79:da:be:e4:9a:8c:ac:d2:5a:
8f:1e:39:51:41:2e:d9:fa:8d:d9:4f:95:94:7d:78:
b2:59:32:88:9f:5d:f6:7d:b2:ff:59:4e:47:26:55:
4b:a7:18:69:9c:d1:5a:36:9e:3c:ba:16:96:39:d6:
a4:fc:46:53:f8:a1:f3:dd:82:bc:a4:a1:3d:91:0e:
fc:cd:dc:f1:1e:0b:65:1f:42:19:3a:13:9e:19:4b:
fc:e3:d8:0b:b9:73:1c:fe:eb:48:36:ec:4f:d2:1a:
34:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:7F:BD:04:68:8A:E8:D0:F1:BB:28:3D:57:1B:D4:77:51:A4:7A
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/Est_vQRoiujQ8bsoPVcb1HdRpHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
12:76:3d:90:ec:58:24:d7:b6:f4:d5:08:eb:78:96:97:1f:5f:
1c:91:6d:d8:fa:66:a9:54:0c:8d:6f:53:0b:4d:7b:c3:e1:55:
dc:ce:d5:85:44:4d:79:85:09:31:76:8a:87:c9:60:21:3f:d3:
a3:86:cd:be:58:4a:2e:97:d0:70:26:4a:42:aa:a2:c6:ae:46:
ff:7a:04:99:bd:2c:27:8e:5b:a7:c2:8b:84:f6:90:77:a7:40:
e1:41:a8:26:3c:10:7b:00:7d:f9:57:92:3f:a6:ae:2d:48:f1:
b8:2d:cf:ec:c6:e7:4b:65:95:b9:f1:9e:69:8e:fe:08:06:db:
06:04:43:21:cd:29:b4:ca:28:a3:5d:81:72:1f:0f:7d:b2:a8:
d7:b9:56:8e:f7:60:f9:b8:8f:b1:43:c0:5b:bb:ec:18:da:b1:
bd:d1:d8:7a:64:6b:f0:11:5a:b4:cb:87:63:d8:eb:15:04:ac:
19:9f:f9:85:9f:9b:21:a7:64:66:74:60:d2:b7:8c:f4:81:83:
ca:93:79:4c:57:94:69:37:7b:52:29:28:d1:1d:03:28:c3:b1:
d7:9d:72:d7:0d:a6:e4:cf:f7:cd:e3:52:98:79:35:85:c5:c2:
79:4a:57:3d:5f:ba:cb:e4:89:8e:22:71:0a:8c:06:43:31:26:
ba:6b:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 12:09:37 2023 by rpki-client on console-fra.rpki-client.org